We use GFM Consulting, Inc. The gentlemen's names are Gordon F. Morris, CBA, CISA and Ray. O. Powell, Jr., CBA, CIA, CISA, CFE. They deal in audit, security, & information technology consulting. Their telephone number is (205) 985-5258. I am not sure how far they travel.
I know from other posts that I have read before that there are also a few other people that help us on here that also do consulting work. One gentleman was actually one of the prior examiners that helped write the GLBA. He responded to a post I did before.
I hope this helps you.
Opinions are mine not my employer. Also I am not marketing for any company or individual. I am not a lawyer so no legal advice is intended.